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A METHOD AND APPARATUS FOR GENERATING MULTIPLE 
WATERMARKED COPIES OF AN INFORMATION SIGNAL 

The present invention generally relates to a method 
5 of watermarking an information signal to generate 
multiple different watermarked copies of the information 
signal. 

When a provider of electronic information such as 

10 audio, video, TV, images, and documents wants to be able 
to identify when illegal copies of the electronic 
information have been made, it is well known in the art 
that the electronic information can be watermarked to 
include information identifying the recipient of the 

15 information e.g. a unique user ID that does not 
perceptually alter the quality of the electronic 
information. Further, in order to reduce the likelihood 
of being able to circumvent the watermarking security 
labelling of the electronic information, the watermarking 

20 technique should not be evident in the electronic 
information. There are many different ways known in the 
art for carrying out watermarking of electronic 
information and the techniques employed will in part 
depend upon the type of electronic information. For 

25 example, one form of watermarking documents is to vary 
spaces within the documents in accordance with a 
particular algorithm. For audio data, the audio signal 
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can be modified in an inperceptible manner in order to 
provide the watermarking.. For images which^^^have been 
compressed using the JPEG compression technique^ the 
images can be watermarked by varying the compression 
5 parameters. This can similarly be applied to MPEG 
compression parameters for video images. 

In conventional watermarking techniques, multiple 
copies of the electronic information are required for 
multiple recipients^ in order to ensure that it is 
10 possible to trace the origin of each copy made in the 
event that illegal copies are detected in circulation. 
Each copy mus t be *^nique^ty watermarked ^jto identify the 
source of any illegal copies. 

Electronic information is commonly transmitted from 
15 an infojnnation source to a recipient over a network. 
Examples of such networks are a cable network and the 
Internet or an intranet. Miere a copy is transmitted 
specifically to a recipient from the source (i.e. a 
unicast transmission) the source can watermark the 
20 electronic information transmitted to the recipient with 
information identifying the recipient so that in an event 
illegal copies* are detected^ the source of the^^copies can 
be determined*- from ^ the**' wav(5ea?maKi?k v 

In networks it has become very common for 
25 information to be sent to more than one recipient at a 
time and this is termed multicast transmission. 
Multicast transmission over networks has the advantage 
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over unicast transmission in that the sender need only 
transmit a single copy which is transmitted to multiple 
recipients. However, because the source only transmits 
a single copy, it has not been possible using the 
5 multicast transmission of the prior art for each 
recipient to receive a uniquely watermarked copy of the 
electronic information. 

In multicast sessions over networks, conventionally 
a recipient will subscribe to the transmission and thus 

10 the source is able to transmit the electronic information 
in an encrypted form. The subscribers are given the key 
to decrypt the electronic information when they receive 
it. This offers security in that only recipients which 
have the key are able to decrypt the electronic 

15 information. This does not however prevent illegal copies 
being made of the legitimately received and decoded 
electronic information. It would however, be of great 
benefit to be able to trace the origin of any illegal 
copies. In the Internet, because routers in the Internet 

20 are required to route electronic information, possible 
sources of illegal copies of the electronic information 
include not only the legitimate recipients, but also 
network operators having control over the routers through 
which the electronic information passes. 

25 The present invention provides a method of 

watermarking an infoannation signal to generate multiple 
different watermarked copies of the information signal. 
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The information signal is segmented into information 
segments . and a plurality of differently wa^termarked 
versions of each information segment are-^generatedv One 
of the watermarked versions of each segment for eaeh one 
5 of the multiple different copies to be generated is 
selected to generate a sequence of differently 
watermarked segments for each copy. The sequence is 
probabilistically unique for each copy* The selection 
is controlled on the basis of information on the identity 

10 and/or location of the receivers of each copy^- 

Thus in accordance with the present invention each 
copy ofe^ the information signaln:is twatermaricq^msing a 
unique -sequencer of watermarkis v This has the-^^Denef it that 
the number of watermarked versions of each -information 

15 segment need not be as large as. the number of copies to 
be made. This reduces the amount of processing required 
in order to generate the watermarked information signals 
for the receivers . 

Although the present invention is applicable to 

20 unicast transmission, the present invention is 
particularly beneficial when used*^ * wSth multicast 
transmissions over a network. In such an*^ emboddment of 
the present invention^ the intelligence^ avai*^lable *at 
nodes in the network is utilised to cariry out the 

25 selection process. The source of the information signal 
generates the plurality of differently watermarked 
versions of each segment of the information signal. These 
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are transmitted to a node in the network. Each node in 
the network then selectively filters out one of the 
watermarked versions of each segment dependent upon the 
position of the node in the tree and the path down which 
5 the information signal is to be transmitted before 
passing the packet downstream. This selection is 
preferably carried out pseudo-randomly using the 
information on the network node position and path as a 
key for the pseudo-random number generation. 

10 In an embodiment, at the final node in the network 

before a receiver, the selection takes the form of the 
selection of only one of the watermarked versions of each 
segment to be transmitted to the receiver so that the 
receiver only receives one watearmarked version of each 

15 segment. The selection process in this final node is 
additionally dependent upon information identifying the 
receiver. 

Thus in a network embodiment, because at network 
receiver nodes more than one user or subscriber may be 

20 operating (i.e. there can be more than one receiver at 
a physical location in the network), information uniquely 
identifying the receiver (user or subscriber) is required 
to be able to more accurately trace the source of illegal 
copies of the information signal in addition to location 

25 information (i.e. the route information). The use of 
both routing information and user identity information 
enables the recipient to be identified where illegal 
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copies have originated from recipients and where illegal 
copies ha^ve originated from% within the= network the 
routers responsible can. be -identified from the routing 
information . 

The number of differently watermarked versions of 
each segment generated by the watermarking means is 
dependent upon the number of nodes in the network. 
Because each node in the network filters out at least one 
of the watermarked versions, in order for there to be at 
least two watermarked versions received by the final node 
in the network to which a . recei.ver? is cGnnected, , the 
n^^InbeI^- of-^geneEated wa4:eEma.isked-^^^ 

than rthe longest route'.between^the»^soua?ce^*and^a ^receiver 
i.e. a route having the largest numbei« of nodes-.* Because 
15 in IP (Internet Protocol) multicast sessions in 
particular, receivers are able to actively join and leave 
multicast sessions, the longest route in a multicast 
session may vary during the session. Thus, information 
on the number of nodes in each route between the 
receivers and the source is monitored at the source so 
that the number of differently watermarked versions lof 
each segment of the information signal can* be varied as 
necessary. If, during the transmission of . anfcin£ormat;ion 
signal, the number of differently watermarked versions 
of the segments is changed, the point during the 
information signal at which the change occurs must be 
noted at the source because this will affect the sequence 
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of watermarked versions appearing in the copy of the 
information signal received by each receiver and will 
thus be required to trace the origin of illegal copies. 

In accordance with an aspect of the present 
5 invention^ the origin of copies of the information signal 
can be detected by using stored information on the 
identity of the recipients, and a copy of the information 
signal. By applying the watermarking and selection 
procedure to the original infonnation signal and 

10 comparing it with the copy to be checked, it is possible 
to identify the receiver from which the copy originated. 

In the embodiment wherein the selection process is 
carried out by the nodes in the network, the information 
required in order to identify the origin of a copy is 

15 information on the identity of the receiver and 
information on the route taken by the copy through the 
network. This information is stored during transmission 
to be used if necessary to trace the origin of suspected 
illegal copies. 

20 

Embodiments of the present invention will now be 
described with reference to the accompanying drawings, 
in which: 

Figure 1 is a functional diagram of the present 
25 invention; 
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Figure 2 is a schematic diagram of an example of a 
network in which'^a source- S mu.lticasts *anr information 
signal to a plurality of receivers Ri^tb R7; 

Figure-3 is a schematic diagram of the- network tree 
structure of the network of Figure 2; 

Figure 4 is a flow diagram of the steps carried out 
at a router in the configuration of the network to carry 
out the selection process in accordance with an 
embodiment of the present invention; 

Figure 5a is a flow diagram illustrating the steps 
carried out at routers in the network to pass packets 
ontoiapther* routers in accordance withman^^embodiment of 
the pr-esentt dnven-t^ion-;- 

Figure %5b is a flow diagram illustrating^fthe steps 
carried *out ,;by . a final router to pass packets onto a 
receiver in accordance with an embodiment of the present 
invention; 

Figure 6 is an illustration of the structure of the 
watermarked data generated by the source in accordance 
with an embodiment of the present invention; 

Figure 7 is an illustration of an example of the 
data structure received by a receivei^ in accordance with 
an»' embodiment* of f"the»*preseh«t^ inven*tion»;< 

Figure 8 is a diagram of the tree structure of the 
network of Figure 3 illustrating the flow of packets over 
the network to the receivers in accordance with an 
embodiment of the present invention; 
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Figure 9 is a flow diagram illustrating the steps 
carried out when a new subscriber wishes to join a 
multicast session in accordance with an embodiment of the 
present invention; 
5 Figure 10 is a schematic diagram of the structure 

of the source apparatus for the information signal in 
accordance with an embodiment of the present invention; 

Figure 11 is a schematic diagram of a router in 
accordance with an embodiment of the present invention; 
10 and 

Figure 12 is a flow diagram of the analysis method 
of an embodiment of the present invention. 

GENERAL OVERVIEW OF THE PRESENT INVENTION 
15 Figure 1 illustrates the functional components of 

a generalised embodiment of the present invention • An 
information signal source 2 provides the information 
signal for which multiple unique watermarked copies are 
required. An information segmenter 3 segments the 
20 information signal from the information signal source 2 
and inputs this into a watearmarking module 4 which will 
carry out the watermarking of the information segments . 
The watermarking module 4 generates a plurality of 
differently watermarked copies of each segment using 
25 watermarking parameters stored in the watermarking data 
store 1. The plurality of differently watermarked copies 
of each information segment are then received by a 
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selector 5 which selects a watermarked copy for each of 
the information segments for each o§r a plurality of 
receivers 7 in dependence upon information on the 
receivers 7 stored in the receiver data store-^6 . Thus, 
5 the selector 5 will generate M unique sequences of 
differently watermarked segments from a stream of 
information segments each having N different watermarked 
copies. The benefit of the present invention is that 
the number N of differently watermarked sequences 

10 generated in the watermarking module 4 is less than the 
number of uniquely watermarked copies- of the 

information signal g^nera^ted 4: and^ received ^ at the 
receivers 7 i.e.- M N. 

The processing required in the ^generation of . the 

15 multiple uniquely watermarked copies is thus greatly 
reduced because the watermarking operation is carried out 
less times. The selection of watermarked copies of each 
segment is a simple operation which is not computational 
intensive compared to the generation of watermarked 

20 copies. The present invention thus provides for a 
considerable reduction in processing requirements 
particularly when M >> N. 

An ana^yse^r module 8 is also providedi^to enable 
illegal copies of the information signal to be analysed 

25 to identify the receiver from which it originated. The 
analyser module needs to have copies of the information 
signals received by the receivers 7. These can either 
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be provided directly by the selector 5 or using 
information from the receiver data store 6, the 
watermarking data store 1, and the information signal 
source 2, they can be reconstituted to predict what 
5 information signals would have been received by the 
receivers ?• An input device 9 is provided to allow the 
input of the alleged illegal copy of the information 
signal into the analyser module 8 for comparison with the 
predicted copies of the information signal for receivers, 
10 The comparison will determine from which receiver the 
alleged illegal copy originates. 

EMBODIMENT OF THE PRESENT INVENTION 

An embodiment of the present invention will now be 

15 described with reference to Figures 2 to 12. 

This embodiment of the present invention is applied 
to the multicast transmission of an information signal 
over an IP (Internet Protocol) network such as the 
Internet or an intranet. 

20 As will be described hereinafter, this embodiment 

of the present invention particularly benefits from the 
advantages of the present invention because the 
processing required to select the watermarked copies of 
each segment is distributed among the nodes of the 

25 network. Thus, a further computational saving is provided 
in that the source need only generate the N multiple 
watermarked version of each segment without actually 
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generating the unique watermarked copy for each receiver. 
This embodiment to the present invention is able to 
achieve this because of the intelligence which can be 
made available within routers in IP networks. 
5 Figure 2 is a schematic diagram of an IP network in 

which a source S multicasts an information signal over 
the network to receivers Ri to Ry who subscribe to the 
multicast session. The source S is arranged on a local 
area network 10 which has an interface to a node (a 

10 router) in the network. The node Ni has IP connections 
to two other nodes N2 and *N3. The ^ node^^Nz has IP 
connections \; to^ : twou ^receivers ^1 ^ and tR^ r as well as a 
connection to another node N^^and to node .NV- Node has 
a connection to other nodes (not shown) and to a node Ng 

15 which interfaces to a local area network (LAN) 11. In 
the LAN 11 there are no receivers which have subscribed 
to the multicast session. 

The node N3 has an IP connection to a node N5 which 
in turn has an IP connection to a receiver R5, an IP 

20 connection to other nodes (not shown) and an IP 
connection to node Ng. Node Ng has IP connections to two 
receivers ' Re^: and Ry" and - IP connections to other* nodes 
(not shown) . Node N4 has IP connections to four receivers 
only two of which R3 and R/^ are subscribers to the 

25 multicast session. 
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In a multicast session of this embodiment, when the 
source wishes to initiate a multicast session / a source 
path message (SPM) is transmitted to the node which 
broadcasts the SPM to the other nodes in the network. 
5 This enables the nodes to identify the path of the 
multicast session. For example, in node there are two 
possible paths from nodes N2 and N3. However, the IP 
connection to N3 is preferred for example because it is 
shorter and thus the IP connection between N2 and is 

10 dropped for the multicast session. On nodes and Nb 
there are no subscribers requiring receipt of the 
multicast information and thus nodes and Ng play no 
part in the multicast session: they do not require the 
information signal to be transmitted to them. If a new 

15 subscriber on the LAN 11 were to request to join the 
multicast session, the node Nb will know the route back 
to request connection to the multicast session and will 
thus connect to node N^ which in turn will connect to 
node N2 thus forming a route to the new receiver on the 

20 LAN 11. Thus the nodes in the network store information 
on multicast sessions and IP connections to enable a 
receiver to subscribe and join a multicast session which 
can entail the opening up of new routes through the 
network . 

25 The routes taken by information signals through the 

network can thus be redrawn as a tree structure as 



illustrated in Figure 3. Nodes which are not in the 
communication route between the source and the^-receivers 
are not relevant as will become clearer hereinafter. At 
each level in the tree a node is assigned- a unique label. 
Each level corresponds to a number of "hops" between 
nodes. in Figure 3 the letters indicate the interface 
IP addresses. Thus node 1 is labelled abr node 2 is 
labelled ai?ce, node 3 is labelled abdf, node 4 is 
labelled abdfkm, node 5 is labelled abdfer and node 6 is 
labelled abdflrtv. These labels are determined by the 
nodes €rom.their position in the network using ,the source 
path messa.ge:v The^methpd,«,bx#whisch.^the^ labels .are 
determii^ed;^will now ^-be described wi-thi ref e^^er^ce to the 
flow diagram'-'of Fi"gure»*4 . 

Figure 4 is a flow diagram illustrating the steps 
carried out at each router in order to set up the router 
ready to receiver and filter the information signal. A 
source path message (SPM) is transmitted by the source 
which wishes to set up a multicast session. This is then 
received by the first hop router and it propagates 
through the network from router to router as. will be 

described hereinaf teiB.. 

In step>*Sl a router receives- one or -more sou^rde path 
messages (SPMs) and adds the incoming interface IP 
address to it. If the router receives SPMs for more than 
router, it selects the SPM which was received first i.e. 
the one which provides the shortest route. In step S3 
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the router then determines the label from the SPM which 
comprises the received SPM and the added incoming 
interface IP address. In step S4 the outgoing interface 
IP address is then added to the SPM and this is 
5 transmitted over the interface. In step S5 the router 
then determines whether there are any more interfaces 
which requires the SPM message to be transmitted over. 
If so, the process returns to step S4 . 

Each router includes a random number generator as 

10 described later with reference to Figure 11. In step S6 
a random number generator is initialised using the router 
label and the interface IP address as the key for each 
interface. The interface address is the IP address of the 
router on the interface to the next router or to a 

15 receiver. Where more than one router or receiver is 
connectied to the router a unique random number sequence 
must be generated for segments passing down each 
connection and thus the psuedo random number generator 
must be initialised using a unique key for each 

20 connection. Thus a separate pseudo random number sequence 
is generated for each IP address (i.e. interface). The 
IP address provides the uniqueness indicating the path 
from the router and the router label provides the 
information identifying the router. Where the router is 

25 the last router in the route (the last "hop" router) and 
one or more receivers are connected to it, the random 
number generator key comprises not just the router label. 
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and the IP address on which the receiver is connected, 
but also the unique ID for the receiver e.g. the 
subscriber ID. In step S7 thet> router is then^ ready^ to 
receive the information signal and cariry out the 
5 filtering (selection) procedure using the random number 
generator as the selector to determine which packets pass 
through the router. 

The last hop router thus stores not just a label but 
also the receiver ID information for receivers connected 
10 to it. This infonnation together with the source path 
message (SPM) is transmitted baqk tto the %S0ur:ce S to be 
stored^ for f later analysis. l^if net^s^ssary rin^^ to 
determine the origin of illegal ,copies«irof the. information 
signal. 

15 The operation of a router when passing packets onto 

another router will now be described with reference to 
Figure 5a . 

In step SlOA packets arrive at the router. In step 
SUA the router waits until a whole transmission group 

20 i.e. all of the multiple copies for a segment are 
received. When the whole transmission group has been 
received , in s t ep S 1 2A one packet which i s -ident i f led An 
the group by^-the >random numbea?*- geneo^ator is discarded 
The remaining packets in the transmission group are then 

25 transmitted to the next router in step S13A. Thus a 
subsequent router will receive a transmission group which 
is smaller. 
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Figure 5b is a flow diagram illustrating the steps 
for forwarding data at a last hop router to a receiver. 
In step SlOB packets arrive at the last hop router and 
the router waits in step SI IB for the whole transmission 
5 group to be received. Once all packets of the 
transmission group have been received one of the packets 
which is identified by the value generated by the random 
number generator is selected in the group and in step 
S13B the selected packet is transmitted through the 

10 receiver- Thus, each receiver only receives one packet 
in a transmission group i.e. only one watermarked copy 
of each segment of the information signal . 

An example of how an information signal is multicast 
over the network will now be described with reference to 

15 Figures 6, 7 and 8. 

Figure 6 illustrates the data structure of the 
watermarked information signal generated at the source. 
A transmission group T comprises multiple differently 
watermarked versions of a segment of the information 

20 signal. In this embodiment there are five different 
watermarked versions A, B, C, D and E i.e. N=5 . Each 
transmission group (1,2. ...P) is transmitted 
sequentially. As can be seen in Figure 6 the information 
signal is segmented into P segments and thus there are 

25 P transmission groups transmitted i.e. 5P packets. 

As can be seen in Figure 8, the data structure of 
Figure 6 is received by the first node . A random 



18 

number generator is initialised using the same label (1) 
for the node but using the interface IP addresses of each 
path to pseudo-randomly select one of the packets in each 
transmission group to be filtered out. Thus, nodes 
5 and N3 receive transmission groups of length 4. Nodes 

and N5 then receive transmission groups of length 3 and 
the furthest node receives a transmission group of 
length 2 . At each of the nodes N^, N5 and Ng which 

have receivers connected to them, a random number 

10 generator is initialised using the node label, the IP 
address *and the receiver ID.^n order to select from each 
of the received . transmission i^ group^one ^-pack^itw to be 
transmitted ^to the receiver. Thus each -receiver receives 
only one packet for each segment. An example of the 

15 unique watermark sequence of segments is illustrated in 
Figure 7 for receiver Ri. 

As can be seen from this example, each node in the 
network receives a transmission group of length N-D where 
D is the depth of the node along the route i.e. the 

20 number of previous nodes or "hops" through which the 
transmission groups have passed. The number of 
watermarked versions of each segment recei*ved^^ at a node 
having a receiver must be at least 2 and thus the number 
of packets in a transmission group must therefore be at 

25 least D for the longest route to a receiver. If N >> D, 
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the number of segments required for the sequence of 
watermark segments to be unique is reduced. 

Although not illustrated in Figures 6 and 1, each 
transmission group will contain headers indicating the 
5 number of segments in a transmission group. This is 
continuously changed at each node as the number of 
packets in a transmission group is reduced as the group 
passes through the network. Each packet within the 
transmission group also contains a header identifying its 

10 sequence in the transmission group. Once again this will 
need to be updated as packets are filtered out by routers 
e.g. if a router receives A, C, E and filters out 
D, E must be relabelled as the 4 th packet in the 
transmission group. 

15 Alternatively for packets which have been filtered 

out (deleted) a place holder packet can be transmitted 
indicating to subsequent routers that the packet has been 
intentionally discarded. This place-holder packet can be 
transmitted in conjunction with a following data packet 

20 to avoid the necessity to transmit a separate packet. 

Multicast IP sessions allow subscribers to join and 
leave the sessions at any point i.e. midway through 
reception of an information signal. Also^ the routes 
taken by the information signal through a network can 

25 change e.g. if a router fails. Thus, the source must 
continuously receive updated information on the paths 
taken by the information signal. This is achieved using 
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the source path message (SPM). The SPM is periodically 
broadcast over the network and infonna*tion is received 
from the last hop routers connected to receivers giving 
route information to. the source. If the route information 
5 indicates that the largest number of routers D in a path 
to a receiver is greater than or equal to the number of 
differently watermarked versions of each segment N, the 
source must increase the number of differently 
watermarked versions of each segment so that N > 

10 Also^ if the longest route shortens and thus D is 
reduced, the bandwidth required for the transmission of 
the watermarked inf ormat^i^n^^^&signal over -the^^^-^^ 
be reduced by reducing N whilst still mai-ntaining the 
relationship N > D. Thus the source monitors the network 

15 in order to monitor the routes to the receivers. If the 
number of differently watermarked versions of each 
segment is changed, the time at which it is changed i.e. 
the segment of the information signal at which the change 
takes place, is stored since this will affect the 

20 sequence of watermarked segments at each receiver. 

The method by which a new subscriber to an IP 
multicast session can join the session will now be 
described with ref-erence to Figure 9 . 

In step S20 the source assigns subscribers unique 

25 IDs and stores subscriber information. The receiver 
acquires the subscriber ID from the source. In step S21 
the new subscriber contacts the nearest router (last hop 
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router) and communicates to it the unique subscriber ID 
which is required in order to join the multicast session. 
In step S22 the router then waits for receipt of the SPM, 
if it has not already received it. The router then sends 
5 to the source in step S23 the source path message (SPM) 
which indicates the route to the router, the subscriber 
ID identifying the new receiver, and the ID of the first 
data packet which is sent to the receiver i.e. an 
identification of the time at which the receiver first 

10 started to receive the copy of the infonnation signal. 
This information is stored at the source for later use 
if necessary in order to identify the source of an 
illegal copy of the information signal. 

At the source, in step S24 the new depth d of the 

15 network for the new subscriber is determined from the 
source path message (SPM). In step S25 it is determined 
whether this new depth is larger than the current depth 
i.e. is d > D. If so, in step S26 the source increases 
the number of differently watermarked versions of each 

20 segment N to maintain the relationship N > d and in step 
S27 the last hop router then receives and forwards the 
information signal to the receiver. If in step S25 it 
is determined that the new depth is no greater than the 
current depth D used by the source to determine N, in 

25 step S27 the last hop router receives and forwards the 
information signal to the receiver. It should be noted 
here that the last hop router before the receiver will 
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not transmit packets to the receiver unless it receives 
multiple copies to choose -from% This is neGessary in 
order to avoid a number of receivers connected to the 
last hop router receiving the same sequence of 
5 watermarked segments. The last hop router must receive 
at least two differently watermarked copies of each 
segment so that the pseudo random number generator can 
be used to randomly select from these for a number of 
receivers which may be connected to the router so that 
10 each receiver* receives a unique sequence of watermarked 
segments . 

In this embodiment * in addd-tioji ^ to the use of 
differently watermarked versions of**"" each segment, 
conventional IP multicast security techniques can be used 

15 such as encryption of the input information signal. A 
subscriber will be provided with the key to enable them 
to decrypt the information signal. The key for the 
encryption is usually coiranon to all receivers of the 
multicast session. Within the packets, headers used for 

20 identifying the number of packets in a transmission group 
and for identifying the packet sequence in the 
transmission group are not encrypted since ithe routers 
need "*to use the header inf orma<ifeion^ for the^^f iltering 
process . 

25 In effect, the tree topology together with the 

receiver ID is the secret used by the source to perform 
the watermarking. Participating routers should therefore 
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refuse requests to reveal any part of that topology. Even 
if some routers and clients collude, it would need a 
conspiracy from a client right up to the source to 
discover anything useful. 
5 The selective discard function aims to provide the 

multicast routers and their clients with the minimum 
degree of freedom possible in order to facilitate the 
later tracing of cheating routers or users . Every router 
in the tree indelibly affects the stream by dropping 

10 certain packets; thus a cheating router should be 
identifiable as every user downstream from that router 
would need to collude to reproduce the watermark data 
passing through the router. 

The higher up the tree, the less likely it is; the 

15 lower down the tree the easier to eliminate targets from 
an investigation. Introducing redundant data into the 
multicast stream increases the size of the stream by the 
number of packets per transmission group at the first hop 
router, then one less at the second hop router and so on 

20 until the packets reach the receiver where the traffic 
size is the same as for a non -watermarked stream. Where 
N is the group size and H is the maximxim number of "hops" 
in the tree from the source to the receiver (i.e. H=D+1 ) , 
this increases the amount of traffic by a factor of: 
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2N-H+3 _ N 
2 H 

This is still far less than the-traffic that would 
be generated by unicasting the unique version- in each 
stream to every receiver. If N=H, which creates the 
minimum extra traffic but takes the watermark sequence 
5 longer, this factor is: 

2 

When- the -last hop > router connects to a sub-network 
(local area network) such as an ethernet, any host on 
that network can receive the same-v^pacXets -with^ .no«jextra 
effort. Non-subscribers on a ^network^ can^ intercepiter such 

10 packets, but do not have the -decryption key needed to 
read them. However, two legitimate subscribers on the 
same sub-network will receive the same watermarked data. 
This however, is typically not a problem since 
multiaccess sub-networks are typically under the 

15 administrative control of a single agency. If one of the 
users of such a network illegally copies the information 
signal, it is traceable to the- agency control-ling%ythat 
network and this is sufficient in most- cases-i* 

The- source of this embodimen.fc to the»*» present 

20 invention can comprise any suitably programmed computer 
with network access . A schematic diagram of the 
structure of such an apparatus will now be described with 
reference to Figure 10. 
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All the components of the apparatus are linked by 
a computer bus 20. The computer apparatus includes a 
read-only memory (ROM) 22 which contains the conventional 
bios for the computer system. Random access memoiry (RAM) 
5 21 is provided as the working memory to be used by a 
processor 23 during the processing operations. The 
processor 23 accesses a storage device 24 in order to 
load up programs to implement a watermarking application 
23a, an encryption application 23b, a network monitoring 

10 application 23c and an analyser application 23d. The 
watermarking application 23a carries out the segmentation 
and watermarking of the segments to generate a plurality 
of differently watermarked copies of each segment using 
watermarking parameters stored in the storage device 24 

15 together with information on the depth of the tree D i.e. 
to determine the number N of differently watermarked 
copies of each segment generated. The encryption 
application 23b carries out conventional encryption of 
the watermarked segments for transmission over the 

20 network. The network monitoring application 23c carries 
out monitoring functions in order to receive information 
from the network on routes to receivers, receiver IDs', 
information on the depth of the tree, which can be 
retrieved from the source path message (route 

25 information), and the times when receivers receive the 
first segments i.e. an identification of the first 
segments received by the receivers . This information is 
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then stored in the storage device 24. The processor 23 
also implements a program module from ^he.. storage device 
24 in order to implement an analyser application 23d for 
the analysis of a watermarked copy of an information 

5 signal in order to determine the receiver or receivers 
from which it originated. This process will be described 
in more detail hereinafter. A removable memory device 33 
is provided to enable the copy of the information signal 
to be analysed to be input. Such a removable memory 

10 device 33 can for example be a floppy disk drive or 
CDROM. Alternatively, the copy of the» inf orma-tion signal 
to -be ;anaiysed can be inpwt .pvieim.^ -the 
netw©»rk«a8inteEf a'ce 25. 

The information signal to be* mu-lticasfe- can be 

15 obtained from an information source in the form of a 
database 26, or it can be obtained real time via an 
input/output device 27 which is connected to, in this 
example, a video camera 28. Thus the information signal 
input from the input/output device 27 or the database 26 

20 is watermarked by the watermarking application 23a 
operated by the processor 23 and encrypted, by the 
encryption application 23b before bei-ng-^mu<l.ticast over 
the network 30 by the netw©a?k inter-faee^ «25. 

The computer apparatus is also provided with a 

25 conventional display 29, a keyboard 31 and a pointing 
device 32 to allow a user to interface with the computer 
apparatus . 
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Thus within the source, the storage device 24 
stores : 

1. The subscriber ID; 

2. The time the subscriber joined (and left) the 
5 multicast session; 

3. The route to the subscriber; 

4. N for each segment; and 

5. The watermarking scheme and parameters that are 
used for each packet; 

10 Also a copy of the multicast information signal is 

either stored in the storage device 24 or a reference to 
its storage location in the database 26 is stored. 

Other parameters which are stored in the storage 
device 24 are: a database of valid users so that when a 

15 request is made during a multicast session the validity 
of the request can be checked, and data on the encryption 
scheme used to encrypt the multicast information signal. 
Watermarked segments will be stored temporarily in the 
RAM 21. Instead of storing the watermarking scheme, and 

20 parameters used for each packet and a copy of the 
original information signal in the storage device 24, the 
watermarked segments can be stored. The storage device 
24 also stores the multicast addresses to be used for the 
multicast session or sessions and the transmission 

25 protocol. Further, if the information signal is 
compressed or encoded, information on the compression or 
encoding scheme is stored. 
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A functional diagram of the functional components 
of a router 40 used in the network 30 for switching the 
information signal over routes in the -network will now 
be. described with reference to Figure -11. Many of the 
5 functions illustrated and described hereinafter are 
implemented by a processor operating in accordance with 
processor instructions . 

The router 40 is provided with a first interface 41 
which receives data from either another router further 
10 up the tree or from the source. Also SPMs' are received 
and transmitted . Received da^^a ..is pass ed». through a 
filter- module "42 for« f ilter(ing"%theT«data 'to >remoY^ at 
least one !pf the packets in -a itransmissi^on group. The 
filter module 42 operates under the control of a random 
15 number generator (RNG) 43. The random number generator 
43 is initialised using parameters stored in a volatile 
memory 44. The volatile memory 44 stores a label for the 
router, the IP address for each interface and the current 
state of the random nxunber generator 43. Data is thus 
20 filtered by the filter module 42 and is output to the 
second interface 45 and the third interface 46. SPM's are 
received by the. inter face 41 and are utilised., by the 
pragmatic general multicast (PGM), protocol engine. 47. The 
PGM protocol engine 47 adds the IP address of the router 
25 40 to the SPM and returns the SPM to the source via the 
interface 41. It also passes the SPM message to the 
second and third interfaces 45 and 4 6 for output to the 
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next routers or the receivers. The router 40 also 
includes a subscription manager 48 for managing 
subscriptions by receivers. If any router 40 is thus the 
last hop router in a route and has a receiver connected 
5 to it^ when a receiver wishes to join an IP multicast 
session, subscriptions messages (SM's) are sent to the 
respective interface 45 or 46 and are then passed to the 
subscription manger 48. The subscription messages 
include the subscriber ID and this is stored in the 

10 volatile memory 44 for use in addition to the router 
label and the interface IP address for the initialisation 
of the random number generator 43 for an interface to the 
receiver. Also the subscriber ID in a volatile memory 
44 is passed back to the source. The subscription 

15 messages also include requests to join and leave a 
multicast session. 

In the embodiment of Figure 11, the PGM protocol can 
be replaced with any suitable protocol e.g. general 
multicast transport service (GMTS). 

20 

An analysis method for analysing a watermarked copy 
of the information signal in order to identify its origin 
i.e. to identify a router or receiver which received the 
sequence of watermark segments, will now be described 
25 with reference to the flow diagram in Figure 12. In this 

^f low diagram the sequence of packets are analysed 

sequentially and at each point in the sequence it is 
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determined which recipients could have received the 
packet. A group of "culprits" is therefore determined. 
If there is a direct match between the sequence predicted 
for a subscriber or a router this is clearly the most 

likely culprit. 

In step S30 a packet is selected and in step S31 all 
recipients of packets i.e. both routers and users are 
marked as suspects. This list of suspects will be 
reduced during the following steps in order to try to 
predict the most likely suspect. 

In step S32 the operation starts by predicting the 
operation of the . first *hop*router. ln;:Step»?S33 the next 
interface on* the- lis* of suspects . at the^router is 
considered and in step S34 it is determined whether the 
15 random number generator is initialised for this interface 
on this node. If not in step S35 the random number 
generator is initialised with the router label and the 
interface ID (and for the last router also the subscriber 
ID). In step S36 the random number generator is then run 
to determine the packet sequence. In step S37 it is then 
determined whether the router sent the- packet on this 
interface. If so in step S38 it is determined whether 
there is a router at the end .of the inteE-feaGer.-- If sov 
the process moves down the tree in step S39 to the router 
at the end of the interface and the process returns to 
step S33. If in step S38 it is determined that a 
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receiver is at the end of the interface the process then 
moves on to step S41 • 

If in step S37 it is determined that a router did 
not send the packet, in step S40 the interface and all 
5 its children are removed from the list of suspects. Then 
in step S41 it is determined whether there are any 
remaining suspected interfaces on the router. If so the 
process returns to step S33 . If not in step S42 it is 
determined whether the router being considered is the 
10 first hop router. If not in step S43 the parent router 
is then considered and the process returns to step S41. 
In this way by continuously looping in steps S41, S4 2 and 
S4 3 the tree can be traversed back up to the first hop 
router . 

15 If in step S42 it is determined that the router 

being considered is the first hop router ^ then the whole 
of the tree will have been traversed for the selected 
packet and thus in step S44 it is determined whether this 
is the last packet. If not, the process returns to step 

20 S30 to be repeated for the next packet. If all of the 
packets have been considered, in step S45 the union of 
the set of suspects is then found as the group of likely 
culprits . 

This method will identify more than one culprit if 
25 the information signal has been patched together from the 
sections from different receivers trying to get round the 
watermarking security measure. Because the comparison 
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is done packet by packet, the receivers who colluded to 
generate the'willegal copy will be identifed.. 

This technique enables the identification of not 
only the receivers but also any routers from which 
5 illegal copies could have originated. 

OTHER EMBODIMENTS 

Although the embodiment of the present invention has 
been described w-th reference to IP multicast over the 
10 Internet or an intranet^ the -present invention is 
applicable to any form of network such as a cable network 
which has some, intelligence -capabi-sLity. in ?4:hg network 
switches . 

In IP multicast, the protocol allows a maximum 
15 number of 32 node s*^ in a route and thus the depth D is 
limited. This limits the number of multiple different 
watermarked versions of a segment which needs to be 
generated and transmitted over the IP multicast system. 
The present invention is, however, applicable to any 
20 network and benefits from the present invention are 
obtained so long as* the* number of nodes«-in the network 
are less than the number* of reeei»vers . 

Although the * present" invention is parrticularly 
suited to multicast transmissions over a network wherein 
25 the selection process is carried out within the network, 
the present invention provides advantages for unicast 
transmission since it reduces the processing required by 
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the information signal source. Fewer watermarked copies 
of the information signal need be generated and the 
unique sequence of watermarked segments for each user can 
be provided by a simple selection or filtering process. 
5 Further advantages of the present invention can 

still be provided in non-networked systems where in 
effect D=l. The technique still benefits from a 
reduction in the number N of watermarked copies which 
have to be produced. 

10 Although in the claims the system is stated as being 

implemented by discrete means, any of the means can be 
combined in an implementation of the system. For 
example, the present invention is ideally suited for 
implementation in software on a multi-purpose computer. 

15 Thus, the segmentation, watermarking and selection means 
can be embodied as instructions for controlling a 
processor. In the network embodiment the segmentation 
and watermarking means are implemented by software at a 
source's computer and the selection means is implemented 

20 by software in each of the routers in the network. 
Because the present invention can be implemented as 
software controlling a multi-purpose computer, the 
present invention can be embodied as a storage medium 
such as a CD-ROM, floppy disc, solid state memory device, 

25 or tape on which are stored instructions in the form of 
computer codes for controlling a processor to carry out 
the process. Further, the computer code can be 
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transmitted over a network to be installed on a computer 
to allows. it to implement the inventioni and- thus the - 
present invention is also embodied as a signal carrying 
the computer code. 
5 The watermarking technique used to form the 

differently watermarked versions of each segment can 
comprise the same watermarking technique using different 
watermarking parameters, or different watermarking 
techniques . Different watermarking techniques can be 
10 used -so long as they»do not perceivably af f ect the data . 

Although in the embodiment of Figures 5a and 5b the 
routers await reception of a whole transmission .. group 
before- filtering, the filtering or selection process need 
not await the receipt of a whole transmission group. 

Further, the selection process is not limi ted-to the 
use of a pseudo random selection procedure, and anything 
which will give a plurality of deterministic sequences 
keyed by receiver information can be used. 

Although specific embodiments of the present 
20 invention have been described hereinabove with reference 
to the drawings, the present invention is not limited to 
such embodiments and it will be apparent to a .skilled 
person in the art that modifications- can.? be^-made- which 
lie within the spirit and scope of the invention. 
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CIiAIMS 

1 . A method of watermarking an information signal to 
generate multiple different watermarked copies of the 
5 information signal, the method comprising: 

segmenting the information signal into information 
segments ; 

generating a plurality of differently watermarked 
versions of each infoirmation segment; and 
10 selecting one of said watermarked versions for each 

segment for each one of the multiple different copies to 
be generated to generate a sequence of differently 
watermarked segments which is different for each copy. 

15 2. A method according to claim 1, wherein the selecting 
is performed using information on the receiver of each 
copy such that the sequence of differently watermarked 
segments of each copy is dependent upon the receiver of 
the copy. 

20 

3. A method according to claim 2, wherein the selecting 
is performed pseudo-randomly based on receiver 
identification information. 

25 4. A method according to claim 2 or claim 3, wherein 
the information on the receiver includes at least one of 
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unique identification information for the receiver and 
infojcination ^on the location of the receivers; * 

5. A method according to any preceding claim wherein 
5 the copies of the information signal are transmitted to 
recipients over a network, and the selecting is performed 
in dependence upon the route taken for each copy to reach 
a respective recipient. 

10 6. A method* according to claim 5, wherein said network 
comprises, a plurality of switching means for switching 
the route taken^ by informa;tiQn. in said ^net^work^ the 
generated plurality of differently watermarked versions 
of each inf ormation segment are i% generated at an 

15 information source* and _input to said network, and said 
switching means carry out the selecting by selecting from 
received watermarked versions for each segments at least 
one watermarked version for each segment not to be 
transmitted on. 

20 

7. A method according to claim 6, wherein said 
switching means to which other said switching .^means are 
connected in the network se^lect one of the ^received- 
watermarked versions for each segment which is not to be 
25 transmitted onto the other said switching means. 
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8 . A method according to claim 6 or claim 7 , wherein 
said switching means to which one or more recipients are 
connected selects one of the received watermarked 
versions for each segment which is the watermarked 

5 version for the segment to be transmitted to each 
recipient connected to the switching means • 

9. A method according to any one of claims 6 to 8, 
wherein the number of differently watermarked versions 

10 of each segment generated is dependent upon the largest 
number of said switching means in a route between the 
source and a said recipient. 

10. A method according to claim 9^ wherein the number 
15 of differently watermarked versions of each segment is 

greater than the largest number of said switching means 
in a route between the source and a said recipient. 

11. A method according to claim 9 or claim 10, wherein 
20 the number of said switching means in the routes from the 

source to the recipients are monitored and the number of 
differently watermarked versions of each segment varied 
in dependent upon the monitored number of said switching 
means . 

25 

12. A method according to any one of claims 6 to 11, 
wherein each said switching means which transmits to 
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another said switching means makes the selection based 
on the position of the switching means in the route ^from 
the source to the recipients; 

5 13. A method according to any one of claims 6 to 12, 
wherein each said switching means which transmits to a 
recipient makes the selection based on unique 
identification information for the recipient. 



10 14. A method-'^according to any one of claims-^ 6 to 13, 
wherein each said switching means transmits -information 
on the position of the ^ smtcjiing^means . in the ^ route 
between the source and the %reci:pients to said -source. 

15 15. A method . accoi^ding to claim 13, wherein each 
switching means which transmits to a recipient receives 
information on the identity of the recipient from the 
recipient and transmits this to saixi source. 

20 16. A method according to any preceding claim wherein 
each watermarked^-^version of each segment is wa^^ermarked 
using the same watermarking technique and^^^is wateinnarked 
differently. 

25 17. A method according to any one of claims 1 to 15, 
wherein each watermarked version of each segment is 
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watermarked using one of a number of possible 
watermarking techniques . 

18. A system for watermarking an information signal to 
5 generate multiple different wateirmarked copies of the 

information signal, the system comprising: 

segmenting means for segmenting the information 
signal into information segments; 

watermarking means for generating a plurality of 
10 differently watermarked versions of each information 
segment ; and 

selecting means for selecting one of said 
watermarked versions of each segment for each one of the 
multiple different copies to be generated to generate a 
15 sequence of differently watermarked segments which is 
different for each copy of the information. 

19. A system according to claim 18,. wherein said 
selecting means is adapted to perform the selecting using 

20 information on the receiver of each copy of the 
information signal to produce the sequence of differently 
watermarked segments of each copy dependent upon the 
receiver of the copy. 

25 20. A system according to claim 19, wherein said 
selecting means is adapted to perform the selection 
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pseudo-randomly based on receiver identification 
inf onna4:ion . 

21. A system according to claim 19 or claim 20, wherein 
5 said selecting means is adapted to perform the selection 
using at least one of unique identification information 
for the receivers and information on the location of the 
receivers . 

10 22. A system according to any one of claims 18 to 21, 
wherein said selecting means comprises nodes in a network 
arranged to receive dif f i^rently wa*feermewrkedo?:veassions of 
each information segment and to geneasate^^the^sequence of 
differently watermarked segments which is different for 

15 each copy in dependence upon the route taken for each 
copy to reach a respective recipient. 

23. A system according to claim 22, wherein each node 
in the network is arranged to control the routing of the 

20 information signal within the network, said segmenting 
means and said watermarking means are provided-^ at an 
information - source connected to a first node in said 
network, said .first*- node is adapted- to reeeive the 
plurality of differently watermarked versions of each 

25 segment, said nodes are adapted to select from received 
watermarked versions for each segment at least one 
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watermarked version for each segment not to be 
transmitted on. 

24. A system according to claim 23, wherein said nodes 
5 to which other said nodes are connected are adapted to 

select one of the received watermarked versions for each 
segment which is not to be transmitted on to the other 
nodes • 

25. A system according to claim 23 or claim 24, wherein 
said nodes to which one or more recipients are connected 
are adapted to select one of the received watermarked 
versions for each segment which is to be transmitted on 
to each recipient connected to the nodes. 

26. A system according to any one of claims 23 to 25, 
wherein said watei^arking means is adapted to generate 
the number of differently watermarked versions of each 
segment dependent upon the largest number of nodes in the 
routes between the source and the recipients. 

27. A system according to claim 26, wherein said 
watermarking means is adapted to generate the number of 
differently watermarked versions of each segment being 

25 greater than the largest number of said nodes in any of 
the routes between the source and the recipients . 
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28. A system according to claim 26 or claim 27, 
including monitoring means for monitoring the nximber of 
said nodes in the routes between the source and the 
recipients , wherein said watermarking means is responsive 
5 to said monitoring means to vary the number of 
differently watermarked versions for each segment 
generated in dependence upon the monitored ntimber of said 
nodes • 

10 29. A system ^ according to any one of claims 23 to 28, 
wherein said nodes which transmit to another^^ said^node 
are adapted to make the selection , based., on the^^^ position 
of the node in ^ the routes from the^^ source^ to the 
recipients. 

15 

30. A system according to any one of claims 23 to 29, 
wherein said nodes which transmit to a recipient are 
adapted to make the selection based on unique 
identification information for the recipients. 

20 

31. A system according to any one^^^of claims^ 23 to^ 30, 
wherein each said node is adapted^^to transmi-t information 
on the position of the node mn- the^' routes*^ belsw 
source and the recipients to said source. 

25 

32. A system according to claim 30, wherein each said 
node which transmits to a recipient is adapted to receive 
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information on the identity of the recipient from the 
recipient and to transmit the information to said source. 

33. A system according to any one of claims 18 to 32, 
5 wherein said watermarking means is adapted to watermark 

each version of each segment using the same watermarking 
technique . 

34. A system according to any one of claims 18 to 32, 
10 wherein said watermarking means is adapted to watermark 

each version of each segment using one of a number of 
possible watermarking techniques . 

35. Apparatus for watermarking an information signal 
15 comprising: 

segmenting means for segmenting the information 
signal into information segments; and 

watermarking means for generating a plurality of 
differently watermarked versions of each information 
20 segment. 

36. Apparatus according to claim 35, including interface 
means for connection to a node in a network, wherein 
receivers requiring a copy of the information signal are 

25 connected to nodes in the network and the nodes in the 
network select one of the watermarked versions for each 
segment for each receiver to generate a sequence of 
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differently watermarked segments which is different for 
each receiver, the apparatus including storage means for 
storing information on the receivers and inf drmation on 
the routes taken to transmit copies of respective 
5 receivers, wherein such interface is adapted to receiver 
said information over the network. 

37. Apparatus according to claim 35, wherein said 
watermarking means is adapted to store parameters used 

10 to watermark each version of each segment. 

38. Apparatus according to claim 36 or plaim 37 , wherein 
said interface means is - adapted to receive from the 
network information indicating when a said receiver began 

15 to receive a copy of the information signal and to store 
the information in said storage means. 

39. Apparatus according to any one of claims 36 to 38 
wherein said interface is adapted to receive information 

20 identifying the number of nodes in the network between 
the apparatus and each receiver, and said -watermarking 
means is adapted to set the- number of< differently 
watermarked^ versions of each segment in dependence upon 
the largest number of nodes identified between the 

25 apparatus and a receiver. 
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40* Apparatus according to claim 39, wherein said 
storage means is adapted to store the number of versions 
of watermarking used for each segment, 

5 41. Apparatus according to any preceding claim wherein 
said storage means is adapted to store information 
identifying a storage location of the information signal 
or to store the information signal, 

10 42. An apparatus according to all of claims 35 to 41, 
including analysis means for receiving a copy of an 
information signal having a sequence of differently 
watermarked segments to be tested and for using the 
information in said storage means to calculate the 

15 sequence of differently watermarked segments for said 
receivers for comparison with the sequence of differently 
watermarked segments to be tested to determine if there 
is a match between at least a portion of the sequences . 

20 43. A method of watermarking an information signal at 

a source, the method comprising: 

segmenting the information signal into segments; and 
generating a plurality of differently watermarked 

versions of each information segment. 

25 

44. A method according to claim 43, including storing 
information on receivers of copies of the information 
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signal and infommation on the routes taken to transmit 
copies . to respective receivers oveiR a netwoiirk having 
nodes which select one of the ^watermarked vea^s ions for 
each segment for each receivea?^ connected*-* to a node to 
5 generate sequence of differently watermarked segments 
which is different for each receiver. 

45. A method according to claim 44 ^ including storing 
parameters used to watermark each version of each 

10 segment. 

46. A metthod according to cl^im ^ 44m or^,, c^ 45^ 
including: receiving from the network^^ inifeormation 
indicating when a said receiver began t^o receive *^a copy 

15 of the information signal and storing the information. 

47. A method according to any one of claims 44 to 46, 
including receiving from the network information 
identifying the number of nodes in the network between 

20 the source and each receiver, and setting the number of 
dif f erent^ly watermarked versions of each segment in 
dependence upon the largest number of nodes identified 
between- the source and- a -recei^veor^r. 

25 48. A method according to claim 47, including storing 
the number of versions of watermarking used for each 
segment. 
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49, A method according to any one of claims 48 to 38, 
including storing infoirmation identifying a storage 
location of the information signal or storing the 
information signal. 

5 

50- A method according to all of claims 43 to 49, 
including receiving a copy of an information signal 
having a sequence of differently watermarked segments to 
be tested, and using the stored information to calculate 
0 the sequence of differently watermarked segments for said 
receivers for comparison with the sequence of differently 
wateirmarked segments to be tested to determine if there 
is a match between at least a portion of the sequences . 

5 51. Apparatus for use in the method of any one of claims 

6 to 15, the apparatus comprising: 

receiving means for receiving a plurality of 

differently watermarked versions of each of a plurality 

of information segments foirming an information signal; 
0 selecting means for selecting at least one 

watermarked version for each segment not to be 

transmitted on; and 

transmitting means for transmitting the or each 

remaining watermarked version for each segment over the 
5 network . 
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52. Apparatus according to claim 50, wherein said 
selecting means is adapted to use^inf ormatiom on the 
position of the switch apparatus in the > network to 
control the selection i 

5 

53. Apparatus according to claim 52, wherein said 
selecting means is adapted to use information on the 
route used for transmission to control the selection. 

10 54. Apparatus according to any one of claims 51 to 53, 
wherein said selecting means^> is adapted t to use 
inf iprmation 4^ identifying^^ a ^ recieiyeru, t,o,^ con^trol the 
selection to select- only one watermarked veirs ion for each 
segment to be transmitted on^^ wherein the^ receiver is the 

15 finals receiver, of the information signal, and said 
transmitting means is adapted to transmit the selected 
watermarked version for each segment to the receiver. 

55. Apparatus according to any one of claims 52 to 54, 
20 wherein said selecting means includes a pseudo-random 

number generator and is adapted to caasry out the 
selection pseudo-randomly , wherein the -information is 
usedi^" as*^ a key to initiate the^ pseudo^^random^^* number 
generator • 

25 

56. Apparatus according to any one of claims 51 to 55, 
wherein said receiving means is adapted to receive a 
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message indicating the route the information signal will 
take^ and said transmitting means is adapted to 
retransmit the message adding the identity of the 
apparatus in the route . 

5 

57. A method carried out at a node in a network, the 
method comprising: 

receiving a plurality of differently watermarked 
versions of each of a plurality of informatiori segments 
10 forming an information signal; 

selecting at least one watermarked version for each 
segment not to be transmitted on; and 

transmitting the or each remaining watermarked 
version for each segment over the network. 

15 

58. A method according to claim 57, wherein the 
selecting uses information on the route used for 
transmission to control the selection. 

20 59. A method according to any one of claims 57 to 59, 
wherein the selecting uses information identifying a 
receiver to control the selection to select only one 
watermarked version for each segment to be transmitted 
on, where the receiver is the final receiver of the 

25 information signal, and the selected watermarked version 
for each segment is transmitted to the receiver. 
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61. A method according to any one of claims 58 to 60, 
wherein a pseudo-random^number generator is used^for the 
selection and is controlled using ^the information "as a 
key to initiate the pseudo-random number generator^* 

5 

62. A method according to any one of claims 7 to 61, 
including receiving a message indicating the route the 
information signal will take, and retransmitting the 
message adding the identity of the node in the route. 

10 

63. Apparatus for identifying the receiver of a copy of 
an information signal watermaisked using ^the- syst^ of any 
one of claims 1^*1 9 to 34, the appa»ra4:us ^^comprising : - 

receivingv means for receiving the copy . of the 
15 watermarked information signal comprising a sequence of 
differently watermarked segments; 

storage means for storing information on receivers 
of copies of the information signal; 

accessing means for accessing the information 
20 signal; 

determining . means - for determining wa^termarked 
versions for segments for receivers ^using^ the accessed 
information signal and the informa-t^ion^on^the receivers; 
and 

25 matching means for matching the watermarks for 

segments for receivers with segments of the received copy 
of the watermarked information signal to identify the 
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receiver of the copy of the watermarked information 
signal. 

64. Apparatus according to claim 63, wherein said 
5 storage means is adapted to store infojrmation on the 

nodes in a network forming the route between a source of 
the information signal and a receiver, and said 
determining means is adapted to determine the identity 
of the receivers using the route information. 

10 

65. A method of identifying the receiver of a copy of 
an information signal watermarked using the method of any 
one of claims 2 to 17, the method comprising: 

receiving the copy of the watermarked information 
15 signal comprising a sequence of differently watermarked 
segments ; 

reading stored information on receivers of copies 
of the information signal; 

accessing the information signal; 
20 determining watermarked versions for segments for 

receivers using the accessed information signal and the 
read infomnnation on the receivers; and 

matching the watermarks for segments for receivers 
with segments of the received copy of the watermarked 
25 information signal to identify the receiver of the copy 
of the watermarked information signal . 
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66 • A method according to claim 64, including reading 
information on the-* nodes in a network forming the route 
between a source of the information signal and a 
receiver, and determining the identity of the receivers 
5 using the route information. 

67. An information signal watermarked using the method 
of any one of claims 1 to 17 comprising a plurality of 
information transmission groups, each information 

10 transmission group comprising^a plurality at differently 
watermarked versions of the same information .packet . 

68. A medium carrying * the information signal of claim 
67. 

15 

69. A signal carrying processor implementable 
instructions for controlling a processor to carary out the 
method of any one of claims 1 to 17, 43 to 50 or 57 to 
62. 

20 

70. A storage ^medium ^carrying processor^ implementable 
instructions for controlling a processor, to cajsry out the 
method of any one of claims^ 1 to 17, 43 to :50l.or 57 to 
62. 



25 
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ABSTRACT 

A METHOD AND APPARATUS FOR GENERATING MULTIPLE 
WATERMARKED COPIES OF AN INFORMATION SIGNAL 

5 

A method and apparatus for watermarking an 
information signal to generate multiple different 
watermarked copies of the information signal is 
disclosed. The information signal is segmented into 

10 information segments. The plurality of differently 
watermarked versions of each information segment is then 
generated and one of the watermarked versions for each 
segment is selected for each one of the multiple 
different copies to be generated to generate a sequence 

15 of differently watermarked segments which is different 
for each copy. 
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